CVE-2022-0073

Authenticated Remote Code Execution in OpenLiteSpeed Web Server

Summary

Original description

The description as published by the source.

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
package github.com
web github.com
web github.com

Metadata

CVE: CVE-2022-0073
Published: 2022-10-27
First seen on SecPulse: 3 years ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-20

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago